codeql/java/documentation/library-coverage/coverage.csv

1	package	sink	source	summary	sink:bean-validation	sink:command-injection	sink:file-content-store	sink:fragment-injection	sink:groovy-injection	sink:hostname-verification	sink:html-injection	sink:information-leak	sink:intent-redirection	sink:jexl-injection	sink:jndi-injection	sink:js-injection	sink:ldap-injection	sink:log-injection	sink:mvel-injection	sink:ognl-injection	sink:path-injection	sink:pending-intents	sink:regex-use	sink:regex-use[-1]	sink:regex-use[0]	sink:regex-use[]	sink:regex-use[f-1]	sink:regex-use[f1]	sink:regex-use[f]	sink:request-forgery	sink:response-splitting	sink:sql-injection	sink:template-injection	sink:url-redirection	sink:xpath-injection	sink:xslt-injection	source:android-external-storage-dir	source:contentprovider	source:remote	summary:taint	summary:value
2	android.app	35		103				11					7									17																		18	85
3	android.content	24	31	154									16																			8					4	27		63	91
4	android.database	59		41																												59								41
5	android.net			60																																				45	15
6	android.os		2	122																																	2			41	81
7	android.support.v4.app	11						11
8	android.util	6	16															6																					16
9	android.webkit	3	2								2					1																							2
10	android.widget		1	1																																			1	1
11	androidx.core.app	6		95																		6																		12	83
12	androidx.fragment.app	11						11
13	androidx.slice	2	5	88																		2																5		27	61
14	antlr			1																																				1
15	cn.hutool.core.codec			1																																				1
16	com.alibaba.druid.sql			1																																				1
17	com.esotericsoftware.kryo.io			1																																				1
18	com.esotericsoftware.kryo5.io			1																																				1
19	com.fasterxml.jackson.core			1																																				1
20	com.fasterxml.jackson.databind	2		6																	2																			6
21	com.google.common.base	4		87																					3	1														63	24
22	com.google.common.cache			17																																					17
23	com.google.common.collect			553																																				2	551
24	com.google.common.flogger	29																29
25	com.google.common.io	8		73			1														7																			72	1
26	com.google.gson			44																																				30	14
27	com.hubspot.jinjava	2																															2
28	com.jcraft.jsch	1		1																										1										1
29	com.mitchellbosecke.pebble	2																															2
30	com.opensymphony.xwork2.ognl	3																		3
31	com.rabbitmq.client		21	7																																			21	7
32	com.thoughtworks.xstream	1																			1
33	com.unboundid.ldap.sdk	17															17
34	com.zaxxer.hikari	2																												2
35	flexjson			1																																					1
36	freemarker.cache	1																															1
37	freemarker.template	7																															7
38	groovy.lang	26							26
39	groovy.text	1							1
40	groovy.util	5							5
41	hudson	68	4	2334		4	3				4										51									6									4	2258	76
42	io.jsonwebtoken		2	4																																			2	4
43	io.netty.bootstrap	3																												3
44	io.netty.buffer			207																																				130	77
45	io.netty.channel	9	2																											9									2
46	io.netty.handler.codec	4	13	259																	1									3									13	143	116
47	io.netty.handler.ssl	4																			4
48	io.netty.handler.stream	1																			1
49	io.netty.resolver			1																																				1
50	io.netty.util	2		23																	1									1										21	2
51	jakarta.faces.context	2	7								2																												7
52	jakarta.json			123																																				100	23
53	jakarta.ws.rs.client	1																												1
54	jakarta.ws.rs.container		9																																				9
55	jakarta.ws.rs.core	2		149																														2						94	55
56	java.awt			3																																					3
57	java.beans			1																																				1
58	java.io	49		45			22														27																			43	2
59	java.lang	31		92		13												8			5			4			1													56	36
60	java.net	13	3	21																										13									3	21
61	java.nio	47		35			3														44																			35
62	java.sql	13		2																										4		9								2
63	java.util	44		484														34							5	2		1	2											44	440
64	javafx.scene.web	1																												1
65	javax.faces.context	2	7								2																												7
66	javax.imageio.stream			1																																				1
67	javax.jms		9	57																																			9	57
68	javax.json			123																																				100	23
69	javax.management.remote	2													2
70	javax.naming	7		1											6		1																							1
71	javax.net.ssl	2								2
72	javax.portlet			61																																				61
73	javax.script	1																	1
74	javax.servlet	5	21	2								1									1										3								21	2
75	javax.validation	1	1		1																																		1
76	javax.ws.rs.client	1																												1
77	javax.ws.rs.container		9																																				9
78	javax.ws.rs.core	3		149																											1			2						94	55
79	javax.xml.transform	2		6																	1															1				6
80	javax.xml.xpath	3																																	3
81	jenkins			446																																				423	23
82	jodd.json			10																																					10
83	kotlin	16		1849																	14									2										1836	13
84	net.sf.json	2		338																										2										321	17
85	net.sf.saxon.s9api	5																																		5
86	ognl	6																		6
87	okhttp3	4		48																										4										23	25
88	org.acegisecurity			49																																				49
89	org.antlr.runtime	1																			1
90	org.apache.commons.codec			6																																				6
91	org.apache.commons.collections			800																																				17	783
92	org.apache.commons.collections4			800																																				17	783
93	org.apache.commons.compress.archivers.tar			4																																				4
94	org.apache.commons.exec	6				6
95	org.apache.commons.httpclient.util			1																																				1
96	org.apache.commons.io	111		560			2														94									15										546	14
97	org.apache.commons.jelly	6																												6
98	org.apache.commons.jexl2	15												15
99	org.apache.commons.jexl3	15												15
100	org.apache.commons.lang			765																																				594	171
101	org.apache.commons.lang3	6		424																			6																	293	131
102	org.apache.commons.logging	6																6
103	org.apache.commons.net	9	12																		3									6									12
104	org.apache.commons.ognl	6																		6
105	org.apache.commons.text			272																																				220	52
106	org.apache.directory.ldap.client.api	1															1
107	org.apache.hadoop.fs			10																																				10
108	org.apache.hadoop.hive.metastore	3																														3
109	org.apache.hc.client5.http.async.methods	84																												84
110	org.apache.hc.client5.http.classic.methods	37																												37
111	org.apache.hc.client5.http.fluent	19																												19
112	org.apache.hc.core5.benchmark	1																												1
113	org.apache.hc.core5.function			1																																				1
114	org.apache.hc.core5.http	73	2	45							1																			72									2	45
115	org.apache.hc.core5.net			18																																				18
116	org.apache.hc.core5.util			24																																				18	6
117	org.apache.hive.hcatalog.templeton	1																														1
118	org.apache.http	48	3	94							2																			46									3	86	8
119	org.apache.ibatis.jdbc	6		57																												6								57
120	org.apache.log4j	11																11
121	org.apache.logging.log4j	359		8														359																						4	4
122	org.apache.shiro.codec			1																																				1
123	org.apache.shiro.jndi	1													1
124	org.apache.tools.ant	11																			11
125	org.apache.tools.zip			1																																				1
126	org.apache.velocity.app	4																															4
127	org.apache.velocity.runtime	4																															4
128	org.codehaus.cargo.container.installer	3																			2									1
129	org.codehaus.groovy.control	1							1
130	org.dom4j	20																																	20
131	org.eclipse.jetty.client	1																												1
132	org.fusesource.leveldbjni	1																			1
133	org.geogebra.web.full.main	1																																1
134	org.hibernate	7																														7
135	org.influxdb	1																												1
136	org.jboss.logging	324																324
137	org.jdbi.v3.core	6																												6
138	org.jenkins.ui.icon			42																																				41	1
139	org.jenkins.ui.symbol			32																																				24	8
140	org.jooq	1																														1
141	org.json			236																																				198	38
142	org.kohsuke.stapler	20	24	343							2										9									4				5					24	332	11
143	org.mvel2	16																	16
144	org.openjdk.jmh.runner.options	1																			1
145	org.scijava.log	13																13
146	org.slf4j	55		6														55																						2	4
147	org.springframework.beans			30																																					30
148	org.springframework.boot.jdbc	1																												1
149	org.springframework.cache			13																																					13
150	org.springframework.context			3																																				3
151	org.springframework.core.io	2																			1									1
152	org.springframework.data.repository			1																																					1
153	org.springframework.http	14		71																										14										61	10
154	org.springframework.jdbc.core	19																														19
155	org.springframework.jdbc.datasource	4																												4
156	org.springframework.jdbc.object	9																														9
157	org.springframework.jndi	1													1
158	org.springframework.ldap	47													33		14
159	org.springframework.security.web.savedrequest		6																																				6
160	org.springframework.ui			32																																					32
161	org.springframework.util	3		142																	3																			90	52
162	org.springframework.validation			13																																				13
163	org.springframework.web.client	13	3																											13									3
164	org.springframework.web.context.request		8																																				8
165	org.springframework.web.multipart		12	13																																			12	13
166	org.springframework.web.reactive.function.client	2																												2
167	org.springframework.web.util			165																																				140	25
168	org.thymeleaf	2		2																													2							2
169	org.xml.sax			1																																				1
170	org.xmlpull.v1		3																																				3
171	org.yaml.snakeyaml			1																																				1
172	play.libs.ws	2																												2
173	play.mvc		13	24																																			13	24
174	ratpack.core.form			3																																				3
175	ratpack.core.handling		6	4																																			6	4
176	ratpack.core.http		10	10																																			10	10
177	ratpack.exec			48																																					48
178	ratpack.form			3																																				3
179	ratpack.func			35																																					35
180	ratpack.handling		6	4																																			6	4
181	ratpack.http		10	10																																			10	10
182	ratpack.util			35																																					35
183	retrofit2	1																												1